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Abstract 



> 
CO 

We give a tight lower bound of Q(^/n) for the randomized one-way communication 
j — ' complexity of the Boolean Hidden Matching Problem |B.TK04j . Since there is a quan- 

tum one-way communication complexity protocol of O(logn) qubits for this problem, 
we obtain an exponential separation of quantum and classical one-way communica- 
tion complexity for partial functions. A similar result was independently obtained by 
Gavinsky, Kempe, de Wolf |GKHW0fij . 

Our lower bound is obtained by Fourier analysis, using the Fourier coefficients 
inequality of Kahn Kalai and Linial KKL88 . 

cr. 



1 Introduction 



Communication complexity is a central model of computation, first denned by Yao in 
1979 |Yao79j . It has found applications in many areas of theoretical computer science. 
Numerous examples of such applications can be found in the textbook of Kushilevitz and 
Nisan |KN97j . 

A communication complexity problem is denned by three sets X, Y, Z and a relation 
1Z C X x Y x Z. There are two unconditionally powerful parties, Alice and Bob, who are 
given inputs x G X and y G Y, respectively. Alice and Bob exchange messages according to 
a shared protocol over a channel, until Bob has sufficient information to announce an output 
z G Z s.t. (x, y, z) G TZ. The communication cost of a protocol is the sum of the lengths of 

* Supported in part by ACI Securite Informatique SI/03 511 and ANR AlgoQP grants of hte French 
Ministry and in part by the European Commission under the Intergrated Project Qubit Applications (QAP) 
funded by the 1ST directorate as Contract Number 015848. 
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messages (in bits) Alice and Bob exchange on the worst-case choice of inputs x and y. The 
communication complexity of the problem TZ is the cost of the best protocol that computes 
TZ correctly. 

In the one-way variant of the model [PS84, Abl96, KNR99 , Alice is allowed to send a 
single message to Bob, after which he announces the outcome. Last, in the Simultaneous 
Messages Passing (SMP) model, Alice and Bob cannot communicate directly, but instead, 
each of them sends a single message to a third party called the "referee" , who computes the 
outcome based on the two messages. 

Another important distinction has to do with the type of problem that Alice and Bob 
try to solve. In the most natural setting, the problem is a total Boolean function, meaning 
that Alice and Bob receive inputs x G {0, l} n and y G {0, l} n and the goal is to compute a 
Boolean function f(x, y), which is defined for all possible (x,y). In other cases, the problem 
is a partial function (or promise problem), meaning that Alice and Bob receive only inputs 
that satisfy some special property and compute a Boolean function f(x,y). For example, 
Alice and Bob might receive sets S and T with the property that either they are disjoint or 
their intersection is half their size and the question is to figure out which of the two cases it is. 
Last, the communication problem could be a relation, meaning that for each input of Alice 
and Bob there could be more than one right answer. For example, on inputs x G {0, l} n and 
y G {0, l} n Alice and Bob need to output an index i G [n] such that Xi = yi (if such an i 
exists). Note that a total Boolean function is a special case of a promise problem, which is 
a special case of a relation. 

We can define different measures of communication complexity for a problem TZ depending 
on the allowed protocols. In a bounded- error randomized protocol with error 5, we allow Alice 
and Bob to have access to public random coins. For any inputs x, y, the outcome z should be 
correct with probability at least 1 — 5, where the probability is taken over the public random 
coins. The cost of a randomized protocol is the number of bits Alice and Bob exchange in 
the worst-case. The randomized communication complexity of TZ (w.r.t. 5) is the cost of the 
optimal randomized protocol for TZ. 

In the setting of quantum communication complexity [Yao93 j , Alice and Bob have qubits, 
some of which are initialized to their respective inputs. In a communication round, a player 
can perform a unitary operation on his/her part of the qubits and send some of them to the 
other player. At the end of the protocol Bob performs a measurement and decides on an 
outcome. The outcome of the protocol should be correct with probability of at least 1 — 5 
(for any inputs x, y) . The quantum communication complexity of TZ is the number of qubits 
exchanged in the optimal bounded-error quantum protocol for TZ. 

The main question in the theory of quantum communication complexity is whether in 
the different communication models quantum channels can reduce significantly the amount 
of communication necessary to solve certain types of problems. 

For total functions, we do not have any exponential gap between quantum communication 
and randomized communication with public coins in any of the abovementioned models. 
Buhrman et al. BCWdWOl] were able to solve the equality problem in the SMP model with 
a quantum protocol of complexity O(logn) rather than the 0(y / n) bits necessary in any 
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bounded-error randomized SMP protocol with private coins |NS96t BK97J. However, if we 
allow the players to share random coins, then equality can be solved classically with 0(1) 
communication. 

For promise problems, an exponential gap between the quantum and the (public-coins) 
randomized communication complexity models was proved in [Raz99j . This was obtained by 
describing a promise problem V\ with an efficient quantum protocol of complexity O(logn) 
and such that the bounded-error randomized communication complexity of V\ is ^(n 1 / 4 ). 

For relations, Bar-Yossef et. al. [BJK04 defined the Hidden Matching Problem and 
proved an exponential gap between quantum and randomized communication in the one- 
way model and the SMP model. 

In this paper we give a tight lower bound of VL(yfn) for the bounded-error randomized 
one-way communication complexity of a Boolean version of the Hidden Matching Problem 
BJK04J. Since there is a simple quantum one-way communication complexity protocol of 
0(logn) qubits for the problem, this provides an exponential separation for promise problems 
between the models of quantum and randomized one-way communication complexity. A 
similar result was independently obtained by Gavinsky, Kempe, de Wolf GKdW06j. 



Our lower bound is obtained by Fourier analysis, using the Fourier coefficients inequality 
of Kahn Kalai and Linial KKL88 , which in turn was proved using the Bonami-Beckner 
inequality |Bon70| IBec75j . The KKL inequality was previously used in the context of com- 
munication complexity in |Raz95| iKlaOlj . 

2 Preliminaries 

2.1 Fourier analysis 

For a function / : {0, 1}™ — > 7Z, we define the £± and £2 norms as 

ii/iii= E i/coi > n/ib= ( E 

£•£{0,1}" \a:e{o,i} n 

It is a well known fact that for a function f : {0,l} n ^ 7Z 

WfWl 

The Fourier transform of/:{0,l} n — >-7?.is defined as 

/= E 

se{o,i} n 

where Xs '■ {0, l} n — > 72. is the character Xs(y) — {~^) yT s with " • " being the scalar product 
over GF(2) and f(s) is the Fourier coefficient 




= i E f(y)xs(y)- 



2 r> 

ye{o,i} n 
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One very useful fact about the Fourier coefficients of a function is Parseval's identity 

Lemma 1. (Parseval's Identity) 

For a function f : {0, 1}™ — > 1Z it holds that 



2- £ (mf 

se{o,i} n 



Let / : {0, l} n -> K and g : {0, l} n -> ft and " + " denote the bitwise XOR of two 
strings. The convolution / * g : {0, l} n — > 1Z is defined as 

f*g(w)= Yl f(y + w )9(y) 

For the Fourier coefficients of a convolution we have the following lemma 
Lemma 2. For functions f : {0, l} n — > 1Z and g : {0, l} n TZ it holds that 

fTg(s) = 2" ■ f(s) ■ g(s) 

Let h(-, •) be the hamming distance function and h(-) the hamming weight function. A 
final tool in our analysis is the KKL lemma 

Lemma 3. [KKL88] Let f be a function f : {0, 1}" — > {—1,0, 1}. Let t be the probability 
that f 7^ 0. Then for every < 5 < 1 
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E ^ (s) (/(*)) 2 <* 

s£{0,l} n 

2.2 Quantum computation 

We explain the standard notation of quantum computing and describe the basic notions that 
will be useful in this paper. For more details we refer the reader to the textbook of Nielsen 
and Chuang jNCOOj . 



Let H denote a 2-dimensional complex vector space, equipped with the standard inner 
product. We pick an orthonormal basis for this space, label the two basis vectors |0) and |1), 

and for simplicity identify them with the vectors ( ^ ) and ( ? ) , respectively. A qubit 



x / V 1 , 

is a unit length vector in this space, and so can be expressed as a linear combination of the 
basis states: 

/ a 



a |0) + ai|l) 



oil 



Here ao,«i are complex amplitudes, and |«o| 2 + |«i| 2 = 1. 

An m-qubit system is a unit vector in the m-fold tensor space H <g> • • • <g> H. The 2 m basis 
states of this space are the m-fold tensor products of the states |0) and |1). For example, the 
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basis states of a 2-qubit system are the four 4-dimensional unit vectors |0) (g) |0), |0) ® |1), 
|1) <g> |0), and |1) <g> |1). We abbreviate, e.g., |1) <g> |0) to |1)|0), or |1,0), or |10), or even |2) 
(since 2 is 10 in binary). With these basis states, an m-qubit state |0) is a 2 m -dimensional 
complex unit vector 

10) = 

«e{o,i} m 

We use (4>\ = to denote the conjugate transpose of the vector \<p), and (<p\ijj) = ((fi\-\ip) ior 
the inner product between states \<jj) and \ip). These two states are orthogonal if (4>\ip) = 0. 
The norm of \<t>) is ||0|| = a/ (4>\4>)- 

Let |0) be an m-qubit state and B = {\b\), . . . , |&2 m )} an orthonormal basis of the m- 
qubit space. A measurement of the state \<f>) in the B basis means that we apply the 
projection operators Pj = |&i)(£>i| to \<f>). The resulting quantum state is with probability 

p l = \m)\ 2 - 

3 Definition of the Boolean Hidden Matching Problem 

The relational version of the Hidden Matching Problem was defined in |BJK04j . There, 
they proved a Q(^/n) lower bound for the randomized one-way communication complexity 
of it and also described a O(logn) quantum one-way protocol. This provided an exponential 
separation for a relation between the randomized and quantum one-way communication 
complexity models. |BJK04| also defined a Boolean version of the Hidden Matching Problem 
but did not provide a lower bound for the randomized communication complexity of it. 

A version of the relational Hidden Matching Problem was also used by Gavinsky et al 
[GKRdW06 to show that in the model of Simultaneous Messages, shared entanglement can 
reduce the communication exponentially compared to shared randomness. 

Here, we define a slightly different version of the Boolean Hidden Matching Problem and 
prove a tight lower bound for its randomized one-way communication complexity. We denote 
a perfect matching on [2n] as a (n x 2n) binary matrix M where each column corresponds 
to a number in [2n] and the i-th row corresponds to the z-th edge of the matching. In other 
words, if the i-th edge of the matching is (k, /), then the i-th row of the matrix contains two 
l's at the positions k and / and 0's elsewhere. 

Let x G {0, l} 2n . Then the product Mx is an n-bit string w, where the i-th bit is equal 
to the parity of the two bits of x that correspond to the i-th edge of the matching, i.e. 
Wi = Xk @xi. Recall that we denote by h(-, •) the hamming distance function and by h(-) the 
hamming weight function. 

The Boolean Hidden Matching Problem (BHM n ): 

Alice gets as input a string x G {0, l} 2n and Bob gets as input a perfect matching M on 
[2n] and a string w G {0, l} n . The promise is that either h(Mx,w) < n/3 ("0" instance) or 
h(Mx,w) > 2n/3 ("1" instance). The goal is for Bob to determine where the input corre- 
sponds to a "0" instance or to a "1" instance. 
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4 Quantum protocol for the Boolean Hidden Matching 
Problem 



We present a quantum protocol for the Boolean Hidden Matching Problem with communi- 
cation complexity of O(logra) qubits. Let x = x± . . . x 2n be Alice's input and M, w be Bob's 
input. 



Quantum protocol for bhm„ 

1. Alice sends the state = ^= £2i( _1 ) x< I*)- 

2. Bob performs a measurement on the state in the orthonormal basis 
B = {^(|fc> ± \£)) | (M) G M}. 



The probability that the outcome of the measurement is a basis state -^(\k) + \£)) is 

im^(i*> + i^»>i 2 = ^((-ir*+(-in 2 - 

This equals to 1/n if x^ © xe = and otherwise. Similarly for the state 4^ — we 
have that KV'I^O^) — K)))| 2 is if ^fc©^ = and 1/n if x^©^ = 1. Hence, if the outcome 
of the measurement is a state A^(\k) + \£)) then Bob knows with certainty that Xk ®xe = 0. 
If the outcome is a state -j%(\k) — \£)) then Bob knows with certainty that x k © X£ — 1. Let 
(k, £) be the j-th edge in the matching M, then Bob outputs x k © xi © ^ - The protocol is 
correct with probability at least 2/3 and by repeating a constant number of times we can 
achieve correctness 1 — e for any small constant e. 



5 The randomized one-way communication complexity 
of the Boolean Hidden Matching Problem 

Theorem 4. The randomized one-way communication complexity of the Boolean Hidden 
Matching Problem is Q(y/n). 

Proof. For b G {0, 1} we denote by o~b the distribution over {0, 1} such that Prob CTi) [6] =3/4 
and define n b = (cr 6 )®™. In other words, n is the distribution over strings {0, l} n such that 
independently for every bit i G [n], Prob M0 [i-th bit is 0] = 3/4 and n x is the distribution over 
strings {0, 1}™ such that independently for every bit % G [n], Prob Ml [i-th bit is 1] = 3/4. 
We define the function / : {0, 1}" -> TZ as 

f(y) = Prob w [y] - Prob Ml [y] 
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It is easy to see that the Fourier coefficients of / are 




for s with h(s) = k and k odd 
otherwise 



Using Yao's Lemma [Yao83] , in order to prove the lower bound, it suffices to construct 
a "hard" distribution over instances of BHM n , and prove a lower bound for deterministic 
one-way protocols whose distributional error with respect to this distribution is at most e. 
For every x G {0, l} 2n and matching M we define the following distributions: 
T>q is the distribution over strings w G {0,1}™ such that independently for each % G [n], 
Prob[wj = (Mx)i\ = 3/4 and T>i is the distribution over strings w G {0,1}™ such that 
independently for each i G [n], Prob[tOj ^ (Mx)i\ = 3/4. 

The "hard" distribution T is defined as follows: The string x G {0, l} 2n and the matching 
M are picked uniformly at random. The string w G {0, l} n is picked according to the 
distribution V = ^V + ^Vi, that is w is picked with probability 1/2 from the distribution V 
and with probability 1/2 from the distribution X> 1; where T> ,T>i are the ones corresponding 
to x, M. The goal is now for Bob to determine whether w was drawn from the distribution 
X?o or Pi. 

Note that if (x, M, w) are picked according to the distribution T, then the probability 
that n/3 < h(Mx,w) < 2n/3 is exponentially small. Hence, any probabilistic protocol for 
BHM n with error e' gives a deterministic protocol for the distribution T with distributional 
error e' + o(l). Therefore, for the rest of the proof we use the distribution T. 

Let us assume that there exists a deterministic protocol P which is correct on the dis- 
tribution T with probability 1 — e, namely for uniformly random x, M and w drawn from 
X>, Bob can determine with probability 1 — e whether w was drawn from D or T^i- Then, 
the protocol is correct for at least half of the x's, with probability at least (1 — 2e) over the 
input of Bob. Let us denote by S C {0, l} 2n the set of these "good" x's. 

Let A C S be a set of x's, for which Alice sends the same message. Note that since A is 
a subset of S, the protocol is correct with probability at least (1 — 2e) over the inputs x G A. 
We are going to show that the size of A cannot be too large. 

Let g : {0, l} 2 ™ — * 1Z be the uniform distribution over the set A, i.e. 




for x G A 
for x ^ A 



For any matching M we define gu : {0, 1} 
picked uniformly from the set A, i.e. 



n 



7Z to be the distribution of Mx when x is 



9m(v) 



\{x G A\Mx = y}\ 
\A\ 
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For the t\ norm of f * qm we have 



*9m\\i = E \f*9M(w)\ = Y 

w£{0,l} n ice{0,l}" 



E f(y + w )9M{y) 



- E 

we{o,i} n 



where the last equation follows from the definition of the function gu- Since Alice's message 
is fixed for the set A and Bob's algorithm is deterministic, for every matching M we can 
split the set of w's into two sets W^m, where b G {0, 1} is Bob's answer. Let M. denote the 
set of all possible perfect matchings on [2n] and N = \M\. Then 



£ En/ 



* 9m\\i 



MeM 



iV ^ ^ A 

MeM weW 0iM xeA 



^E E raE/(^+-)+4E E 4i 



JV ^ ^ LA 

MeM wew 1 m ieA 



> 



N\A 
1 



+ 



> 



+ 



N\A 
1 



N\A 
1 



N\A 
1 



N\A 



E E E/( Afc + 

MeM weW ,M xeA 



w 



+ 



N\A\ 



E E E/( Ma; + w ) 

MeM iceWi m xeA 



Y E E ( Prob Mo [ Mx + H - Pr ob Ml [Mi + w] ) 

MeM weW ,M xeA 

E E E ( Prob Mo [ Ma; + M - Prob Ml [Mi + w] ) 

MeM weWi M xeA 



E E E Prob ^[ Ma;+w ] 

MeM weW ,M iei 



1 



E E E Prol w Ma; + 

MeM i»eWi m *A 



w\ 



N\A\ 
1 

MAI 



MeM weW ,M iei 



E E E Prol w M *+ 

MeM i»eWi m ^eA 



w 



The protocol is correct when Bob answers b G {0, 1} and the string w was drawn from the 
distribution V^. Since the protocol is correct with probability at least 1 — 2e we have 



fEsEE >KH+^EraE E >vm > 



iV ^ |A| ^ ^ 2 

MeM 1 1 xeAwew ,M 



N ^ \A\^ ^ 2" 

MeM 1 1 xeA weWi M 



2e 



tm E E E Pr °v[ M ^+ w ] + ^T4T E E E Pr °v[ Mx+w ] ^ 2 ~ 4e 



MAI 



MeM u>eVK 0i M a;eA 



MeM weWi m 
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Similarly, 

Hence, we conclude that 

^ J2 Wf*9M\\x > 2(1 -4e) 
MeM 

The £1 and £2 norms are related by the following inequality 

|/*0Af|ll 



Il/*^ll2 > 

and hence for the £2 norm we have 



2" 



* 9m\\i 



E H/*^ll2 > E ~ 2 " M ^ = ~2~™~N E H/*^Hi ^ ^ (4 E n/ 

MGA4 MeM MeA4 V Me.M 

> _L(i_ 4e )2 

By Parseval's identity (lemma 1) and the convolution theorem (lemma 2) it holds that 
11/ '*9M\\l = 2 n J2(f 7 9M(s)) 2 = 2 3n J2(hs)) 2 (9M(s)f 

s s 

Using the expression for the Fourier coefficients of / we have 

MeM s MeMs:h(s)=k 

k odd 

= E E i(9«w) 2 (2) 



iV ^ ^ 2 

MS.M s:h(s)=k 
k odd 



Putting (JU) and © together we have 

(l-4e) 2 <2-i£ J] 4(^(,)) 2 (3) 



N ^ ^ 2 2k 

MeM s:h(s)=k 
k odd 



We now relate the Fourier coefficients of Qm with those of g. Note first that if M is an 
[n x 2n) matrix, x G {0, l} 2n and s G {0, l} n then 



(Mi) T • s = (x T M T ) ■ s = x T ■ (M T s) 
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By the definition of gM, its Fourier coefficients are 

9m(s) = ^Y.9M{y){~l) yT - s = e A|(Mxf -s = 0}| - |{s G A|(Mzf = 1}|). 



1/ 

rT, 



Let sm = M s and note that 1i(sm) = 2h(s). Then, 
9M = ^ £ ^)(-ir T ^ = ^(l{^e^i^^M = 0}|-|{xGA|x T . SM = l} 

xe{o,i} 2 " 

= G A| (Mx)T ' s = 0)1 " l{x G Al {Mx)T ' s = 

Inequality (jSJ) now becomes 

(1-4.)" < 2-1 ^ J] ^(smM) 2 

AfeX s:h(s)=k 
k odd 

= 22 4 E E i 22 " <* (Sm))2 

MeA4 s:h(s)=k 
k odd 

= 24 "^ E E ^fe)) 1 w 

AfeM s:h(s)=k 
k odd 

In the above expression we first sum over all matchings and then over the string s. In what 
follows we will try to change the order of the summation. Note that in the above expression 
when h(s) is odd, H{sm) = 2 mod 4. For any k = 2 mod 4 we define 7^ as follows: 
Let z G {0, l} 2n be any string of hamming weight k and M be a random matching. Then 

7^ = Prob M [3s s.t. z = s M ] 

Note that this probability depends only on k and not on the specific string z. For any even 
number t > 2, let iV(£) be the number of perfect matchings on [t\. Then, 

iV(2) = l, JV(t) = (t- l)N(t-2). 

It is not hard to see that the expression for 7^ is 

_ N{k)N(2n - k) _ (k- l)(fc-3) • ... • 1 / k\ k/2 

lk ~ N(2n) ~ (2n - l)(2n - 3) • . . . • (2n - fc + 1) ~ \2^ J 

We now rewrite inequality (£Q) after changing the order of the summation 



z:h(z)=k 
k=2(mod4) 
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and hence 

1 £ a^w 2 '" E ^«w> 2 

V ; z:h(z)=k 

k=2{modA) 

- E 7i^ 24 " E ^(,)) 2 



4e) s 

k=2(mod4) v 7 z:h(z)=k 



From the above inequality, it is easy to see that there exists a k such that 
7T^Y 2 * n E ^(^)) 2 ^ ^/ E 2^ 

V ' z:h(z)=k r=2(modA) 



otherwise sum over k = 2 mod 4 to get a contradiction. Moreover, 

1 2 

2^/2-3 



E -< 



r=2(moe£4) 

and hence for that k 



2 1 " E ^«wr > 



z:/i(,z)=fc 

We choose small enough e such that 3( - 1 ~ 4<: - > > 1 and then we rewrite the above inequality as 

- IklAmz))* > 2 fc / 2 (5) 



\A 



2 

z:h(z)=k 



Let 5 = (7fc) 1/fc . Note that < 5 < 1. By the KKL inequality (lemma 3) |KKL88j . we know 
that 

\A\\ 1+ 5 



z:fo(2)=fc 

Hence, inequality (jSJ) becomes 



E wc*«) a <(P)' 



2fc/2 < 2^ /L4|\^ = /L4|\^ /J£N - 2rt ' 
- UP V 2 2 ™ / V 2 2 " 7 - V 2 2n 



and therefore 

|.4 

We know that j k < (^) fe/2 and > 2, so 



M < (2fc / 2) -V^ = 2 - fc /4* (6) 



45 ~ 4( 7fc ) 1/fc ~ 4 (A) 1 / 2 ~ 4 ~ "IT' 

V 2n / 
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From inequality (JBJ) we conclude that 



— -Jn 

< 2— 

Since the size of any \A\ cannot be more than 2 2n ~ n ^\ it means that there are at least 
2 n (V™) different sets A. In other words, there are at least 2 n ^ different messages that Alice 
sends and therefore the length of her message is at least Q(y/n). □ 



\A\ 
\A\ 
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